It seems there are multiple culprits. According to Dede's blog updates, some contribution to this attack security vulnerabilities, including, WordPress stored in plain text configuration file WP-database credentials, many WordPress users allow anyone to read. Dede also said that a malicious user in the network solutions that create a script to find the configuration file is misconfigured.
No comments:
Post a Comment